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,  An  improved  reliability  analysis  of  fatigue-sensitive  aircraft 
structures  is  presented  which  accounts  for  the  effects  of  realistic 
operational  loading  inputs,  inspection  frequency  and  damaged  part 
renewal  on  the  subsequent  probability  of  first  failure  in  a  fleet 
of  aircraft.  Furthermore,  the  analysis  provides  an  approach  to 
conducting  trade-offs  between  given  fleet  reliability  levels  and 
the  associated  costs  of  the  necessary  inspection  and  maintenance 
procedures . 

The  analysis  is  based  on  the  application  of  random  vibration 
theory.  Operational  service  loads,  composed  cf  ground  loads,  ground- 
air-ground  loads  and  gust  loads,  are  all  random  in  nature.  The 
fatigue  process  involved  here  consists  of  crack  initiation,  crack 
propagation  and  strength  degradation.  The  time  to  crack  initiation 
and  the  ultimate  strength  are  also  random  variables.  After  a  fatigue 
*  crack  is  initiated,  fracture  mechanics  is  applied  to  predict  crack 

,  propagation  .under  random  loading.  While  the  fatigue  crack  is 

propagating,  the  residual  strength  of  the  structure  decreases 
progressively,  thus  increasing  the  failure  rate  with  time.  The 
aircraft  structure  is  subjected  to  periodic  inspection  in  service. 
When  a  fatigue  crack  is  detected  during  inspection,  the  implicated 
component  is  either  repaired  or  replaced,  so  that  both  the  static 
and  the  fatigue  strength  are  renewed.  Such  a  renewal  process  is 
taken  into  account  in  the  present  analysis.  The  detection  of  an 
k  existing  fatigue  crack  during  inspection  is  also  a  random  variable 

which  depends  on  the  resolution  capability  of  the  particular 
technique  employed,  the  thoroughness  of  the  inspection  and  the  size 
of  the  existing  crack.  Taking  into  account  all  the  random  variables 
as  well  as  all  the  random  loadings,  the  solution  for  the  probability 
I  of  first  failure  in  a  fleet  of  aircraft  is  derived.  Further,  an 

t  inspection  frequency  optimization  is  formulated  based  on  the  concept 

'  J  of  cost  of  failure.  Finally,  numerical  examples  are  given  to 

I  demonstrate  the  effect  of  inspection  on  the  fleet  reliability. 
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I 

INTRODUCTION 


Fatigue  has  been  a  problem  in  the  design  of  many  structures 
in  mechanical  engineering.,  e.g.,  turbine  blades/  propeller  shafts; 
in  aeronautical  engineering,  e.g.,  aircraft  structures,  and  in 
civil  engineering,  e.g.,  buildings,  highway  and  railroad  bridges, 
etc.  The  problem  of  fatigue  is  further  complicated  by  the  fact 
that  most  of  the  loading  inputs  to  these  structures  in  service 
are  random  in  nature  [e.g.,  Refs.  1-6].  Typical  examples  are  gust 
and  maneuver  loads  on  aircraft,  [e.g.  Refs.  7-13],  wind  and 
earthquake  forces  on  buildings,  traffic  loading  to  bridges,  etc., 
to  mention  just  a  few. 

Fatigue  damage  is  revealed  in  a  structure  by  the  initiation 
of  a  visible  crack.  It  has  been  a  practice,  e.g.,  on  railroad 
bridges  and  aircraft  structures,  to  periodically  inspect  fatigue- 
sensitive  structures  in  order  to  detect  such  cracks  and  tc  repair 
or  replace  the  cracked  components  [e.g..  Refs.  14-17].  Inspection 
is  an  important  procedure  to  increase  the  reliability  of  fatigue- 
critical  structures.  Hence,  reliability  analysis  of  fatigue- 
sensitive  structures,  under  random  loading  and  periodic  inspection, 
is  of  practical  importance,  and  is  the  primary  concern  of  this  study. 
In  addition,  an  inspection  frequency  optimization  is  formulated, 
based  on  minimization  of  the  expected  cost  of  failure.  Although 
the  application  of  reliability  analysis  to  aircraft  structures  is 
emphasized,  the  approach  discussed  in  this  report  is  equally 
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applicable  to  other  fatigue-sensitiye  structures,  e.g.,  civil 
and  mechanical  engineering  structures,  under  random  loading. 

The  specific  type  of  random  loading  considered  herein  is  a 
f 1 j ght-by- flight  loading  to  transport-type  aircraft  (bombers, 
tankers,  etc.).  It  consists  of  ground  loads,  ground-air-ground 
loads  and  gust  loads,  which  are  all  random  in  nature.  The* 
ultimate  strength  of  the  structure  is  also  a  random  variable  with 
certain  statistical  variability  te.g.  Refs.  18-19].  Failure 
occurs  as  soon  as  the  strength,  either  the  ultimate  strength  or 
the  residual  strength  after  crack  initiation,  is  exceeded  by  the 
random  load  level.  This  is  referred  to  as  the  first-passage  or 
first-excursion  failure  in  random  vibration  [e.g.  Refs.  20-23]. 

The  fatigue  process  considered  consists  of  (i)  crack 
initiation,  (ii)  crack  propagation  and  (iii)  strength  degradation. 

The  time  to  crack  initiation  is  a  random  variable  and  is  assumed  to 
have  a  two-parameter  Weibull  distribution  [Refs.  24-25].  After  the 
fatigue  crack  is  initiated,  fracture  mechanics  is  applied  to  estimate 
crack  propagation  under  random  loading,  where  the  statistics  of 
rise  and  fall  of  random  loading  plays  an  important  role  [Ref s. 26-29] . 
While  the  crack  is  propagating,  the  ultimate  strength  is  reduced 
progressively.  As  a  result,  the  residual  strength  of  a  cracked 
structure  decreases,  thus  increasing  the  failure  rate  (or  risk 
function)  in  time  iRef.  30]. 
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The  residual  strength  after  crack  initiation  is  related  either 
to  the  ultimate  strength  and  the  crack  size  through  the  Griffith- 
Irwin  equation  for  non  redunant  structures  [e.g.  Refs.  31-32]  or  is 
determined  by  testing  and  analysis  for  redundant  structures  (e.g.. 

Refs.  14,15,33-36].  With  the  concept  of  fail-safe  design,  fatigue 
crack  propagation  will  be  arrested  by  the  "crack  stopper";  thus  the 
fail-safe  crack  size  defines  the  maximum  crack  allowable  in  the  structure 

The  inspection  is  performed  at  periodic  intervals  in  order 
to  detect  the  fatigue  crack  if  it  exists.  When  a  crack 
is  detected,  the  cracked  component  is  repaired  or  replaced  so  that 
both  the  residual  strength  and  the  fatigue  strength  of  the 
component  are  renewed.  This  renewal  process  is  taken  into  account 
in  the  present  reliability  analysis.  During  inspec  ion,  however, 
the  fatigue  crack  may  not  be  detected.  The  detection 
of  an  existing  crack  is  also  a  random  variable,  which  depends 
on  the  resolution  capability  of  a  particular  method  or  technique 
employed  for  inspection.  The  probability  of  crack  detection,  in 
general,  is  an  increasing  function  of  the  existing  crack  size  [Refs. 32, 37] . 

Taking  into  account  all  the  random  variables  and  random 
loadings  described  above,  the  solution  for  tv—  probability 
of  failure  is  derived  through  application  of  the  conditional 
probability  theory.  Then,  an  inspection  frequency  optimization  is 
formulated  on  the  basis  of  the  expected-cost-of  failure  concept  [Refs. 38,39] 
The  optimum  inspection  frequency  is  determined,  to  minimize  the 
expected  cost  of  failure,  while  the  constraint  on  the  structural 
reliability  is  satisfied. 


3 


II 

RANDOM  LOADING 


Consider  a  designed  flight-by-f light  random  loading  history 
(see  Fig.  1),  where  each  flight  has  three  different  characteristics: 
Cl)  ground  loads  S^(t),  (2)  gust  loads  S(t)  and  (3)  ground-air- 

ground  loads  Z.  This  specific  type  of  random  loading  has  been 
used  for  the  design  of  transport-type  aircraft  (bombers,  logistic 
aircraft,  etc.). 

The  ground  loads  S^(t),  resulting  from  landing  and  take-off, 

have  been  modeled  as  a  random  process  (see  Ref.  1) .  They  produce 

compressive  stresses  in  the  fatigue  critical  component,  and  have  some 

effect  on  the  fatigue  life.  It  has  been  observed  in  fatigue 

experiments ,  that  when  the  general  loading  range  of  a  specimen  is 

in  tension,  the  introduction  of  occasional  high  level  loads  results 

in  a  prolongation  of  the  fatigue  life  due  to  the  effect  of  beneficial 

residual  stresses.  This  beneficial  effect,  however,  is  eliminated 

when  compressive  stressess  are  introduced  in  the  loading  history. 

Hence,  the  existence  of  the  ground  loads  S  (t)  eliminates  the 

9 

possible  beneficial  effect  due  to  occasional  high  gust  loads. 

In  each  flight,  there  is  one  cycle  of  ground-air-ground  load  Z, 
which  is  also  a  random  variable  over  the  life  of-  the  aircraft. 

The  magnitude  or  range  of  this  load  cycle  is  so  large  that  it 

has  a  profound  effect  on  the  fatigue  life  of  the  aircraft  structure. 
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The  catastrophic  failure  of  the  structure  is  essentially  due 
to  gust  loading,  since  failure  occurs  when  the  ultimate  strength 
Cor  the  xesidual  strength  after  crack  initiation)  is  exceeded. 

The  gust  loading  S(t),  .modeled  as  a  stationary  composite  Gaussian 
process  [Kefs.  7-13] ,  will  be  adopted  herein  and  is  described  briefly 
in  the  following: 

The  gust  loading  S(t)  consists  of  a  series  of  turbulence 
patches  modeled  as  stationary  Gaussian  random  processes  S(t,o.), 
i=l,2,...,  where  0^  is  the  standard  deviation.  The  power  spectral 
densities  G^(«y  for  S(t,o^),  i=l,2...  are  identical  when 
normalized  with  respect  to  0j_,  i.e.,  G^aO/o^  is  invariant  for  all 
1 — 1  ,  2 , . . . 

The  expected  number  of  uperossings  (or  uperossing  rate)  per  loeid 
cycle  v  (Kgr^)  across  a  threshold  RQ  ,  the  ultimate  strength, 
by  S(t,0i)  is  well-known, [e.g.  Ref.  1], 

v+(R0'°i)  =  exp  S“(VXO)2/20i  !  {1) 


where  XQ  is  the  average  value  of  S(t,o^),  which  is  equal  to 
the  stress  associated  with  one  g  loading  [see  Fig.  1],  The 
standard  deviations  a^,  1=1,2...  are  assumed  to  be  statistically 
independent  and  identically  distributed  random  variables  with 
an  half-normal  distribution  [e.g.,  Refs  12-13] 


»  P1(2/tt0c21)L/2  e~*/2acl+  P2  (2 A022 


1/2  2  2 
)  e“x  /2ac2 


(2) 
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where  f Q  Cxi  is  the  density  function  of  c^,  and  ?2  reprerant  the 
fractions  of  nonstorm  turbulence  (.clear  air)  and  the  thunderstorm 
turbulence,  respectively,  with  associated  intensities  ccl  and  oc2. 
Hence,  P^  +  P2  -  1.  Parameters  pi'P2'aci/B  an^  °c2^B  3X6  re;ferxed 
to  as  turbulence  field  parameters  and  are  specified  in  Ref.  7  for 
various  altitudes,  where  B  represents  the  structural  characteristics 
[see  Ref.  12] .  A  unified  approach  for  the  determination  of  these 
parameters  from  the  measured  turbulence  data  has  recently  been 
proposed  in  Refs.  12-13. 

Therefore,  the  average  number  of  upcrossings  per  cycle  (one  cycle 
is  defined  as  one  upcrossing  of  the  mean,  Xq  )  by  the  S(t)  process) 
is  obtained  as 


CD 

=  jv+(R0'x)fa(x) 


dx 


=  Px  e“{R0“X0)//ocl  +P2  e“(Ro”X0)/ac2 


(3) 


Thus  the  upcrossing  rate  of  a  threshold  R^  is  an  exponential 
function.  This  has  been  verified  by  extensive  turbulence  field 
data  [Refs.  7-13],  and  Eq.  3  has  been  used  in  the  current  U.S.  Air 
Force  specification  iRef.  73  for  aircraft  structural  design  for 
atmospheric  turbulence  [Refs.  12-13].  The  gust  process  S(t) 
thus  defined  is  referred  to  as  a  composite  Gaussian  process. 

It  should  be  mentioned  that  the  first  term  in  Eq.  3  represents 
the  contribution  from  clear-air  turbulence  and  pi>>P2'CTc2>acl* 
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Therefore,  it  is  primarily  responsible  for  the  fatigue  initiation 
and  crack  propagation.  In  the  current  practice  in  random  fatigue 
testing,  the  second  term  is  usually  disregarded  [e.g.  Refs.  15,39]. 

The  second  term,  representing  the  contribution  from  storm  turbulence 
with  large  intensity  oc2  is  primarily  responsible  for  the  excursion 
or  exceedance  of  the  ultimate  strength  or  the  residual  strength 
of  the  structure.  Eq.  3  will  be  used  later  for  computing  the 
failure  rate  (or  risk  function)  in  order  to  estimate  the  structural 
reliability. 

We  digress  here  to  comment  that  the  fact  that  this  turbulence 
model  results  in  an  exponential  exceedance  (Eq.  3) ,  does  net  imply 
that  it  is  the  only  feasible  model.  This  is  very  important,  since 
other  models  of  random  processes  may  also  produce  an  exponential 
exceedance  such  as  Eq.  3.  The  model  is  employed  herein  for 
expediency  in  view  of  the  fact  that  no  simpler  model  for  gust  loading 
for  the  purpose  of  implimentation  in  design,  exists  in  the  literature. 
An  exploratory  nonstationary  model  for  gust  loading,  recently 
proposed  by  Lin  [Refs.  2-3] ,  should  be  mentioned. 
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materials/ structural  performance  and  inspection 


3.1  Fatigue  Crack  Initiation 

When  a  structure  is  subjected  to  cyclic  loading  for  scone  tune, 
a  fatigue  crack  will  be  initiated  first.  This  initiated  crack  will 
propagate  progressively  until  a  critical  crack  size  is  reached  and 
fracture  occurs.  It  is  well-known  that  the  fatigue  process 
consists  of  crack  initation,  crack  propagation  and  final  fracture. 

It  has  been  shown  that  the  statistical  distribution  of  the  time  T 
to  fatigue  crack  initiation  for  the  critical  components  of  aircraft 
structures  can  be  represented  by  a  two-parameter  Weibull  distribution 
[e.g.,  Refs.  15,24]. 

wct>  - 1  <<> 

where  a  is  the  shape  parameter  and  3  the  scale  parameter.  These 
parameters  should  be  estimated  from  the  test  results  of  both  the 
coupon  specimens  and  the  full  scale  structure  under  flight-by- 
flight  loading  shown  in  Fig.  1  [see  Refs.  15,40-42] .  If  the  result 
of  the  full-scale  test  is  not  available,  an  alternate  approach  is 
to  estimate  the  parameter  g  by  use  of  the  cumulative  damage  hypo¬ 
thesis  and  the  S-N  curve. 

3.2  Crack  Propagation  Under  Random  Loading 

Once  the  fatigue  crack  is  initiated  and  has  a  detectable  size, 
say  0.02",  fracture  mechanics  can  be  applied  to  predict  the  crack 
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propagation  under  random  loading.  The  applicability  of  fracture 

mechanics  requires  that  the  crack  size  should  be  large  compared 

to  the  plastic  zone  at  the  crack  tip.  For  most  materials,  such  as 

aluminum,  this  requirement  is  satisfied  for  a  detectable  crack 

size,  say  0.02" [see  Ref.  32).  Therefore,  the  power  law  of  crack  propagation 

under  Gaussian  random  loading,  which  has  been  verified  experimentally 

[see  Refs.  26-28] ,  will  be  used, 


d^/dn  =  c  AK  (5) 

where  a  is  the  crack  size,  da/dn  is  che  rate  of  crack  propagation 
per  cycle,  AK  is  the  range  of  stress  intensity  factor,  and  b  and 
c  are  material  constants.  A?*  is  the  average  of  the  bth  power  of 
the  stress  intensity  factor  range.  For  aluminum  under  random 
loading,  b=4  seems  to  be  appropriate  [Refs.  27-28] .  For  the  sake 
of  simplicity  of  presentation,  we  shall  set  b=4,  realizing  that  when 
b  is  different  from  4  for  other  materials,  the  approach  discussed 
herein  remains  valid  and  it  does  not  involve  any  difficulty  to  account 
for  it.  Hence, 

AK4  -  S4  a2  (6) 

"4 

where  S  is  the  average  of  the  fourth  power  of  the  rise  and  fall 

of  the  composite  Gaussian  process  S(t).  Approximate  methods  for 
— 4 

estimating  S  from  the  power  spectral  density  are  available  in 
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Kefs.  26-29»  and  axe  summarized  in  the  Appendix. 


Thus, 


da/dn  =  c  S4  a^  (7) 

Integrating  Eq.  7  from  the  initial  crack  size  aQ  to  the  crack 
size  a  (t) ,  after  t  flight  hours,  one  obtains, 

a (t)  =  a  /  [l-tancQ] 

0  °  (8) 

Q  =  NQ  I-S4  +  Z4/Na] 

~4 

m  which  NQ  is  the  number  of  gust  load  cycles  per  flight  hour  and  Z 
is  the  average  of  the  fourth  power  of  the  gtound-air-ground  cycle. 

N  is  the  number  of  gust  load  cycles  per  flight.  In  Eq.  8,  the 

a 

contribution  to  the  crack  propagation  from  both  the  gust  load 

S(t)  and  the  ground-air-ground  cycle  Z  have  been  taken  into  account. 

The  ground  oad  S  (t) ,  producing  a  compressive  stress,  (Fig.l) 

y 

seems  not  to  make  a  significant  contribution  to  the  crack 
propagation,  except  that  it  eliminates  the  beneficial  effect  resulting 
from  the  occasional  high  loads  S(t),  and  hence  it  is  omitted  in 
Eq.  8  [see  Section  VIII  for  discussion] . 

3.3  Residual  Strength 

After  a  fatigue  crack  is  initiated  in  the  structure,  the 
ultimate  strength  decreases  due  to'the  presence  of  the  crack. 
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Based  on  fracture  mechanics,  the  relationship  between  the  residual 
strength  R  of  a  structure  containing  a  crack,  and  the  crack  size  a 
is  given  by  the  Griffith- Irwin  equation, 

Kc  =  R  ^7T  (9) 

in  which  K  is  the  critical  stress  intensity  factor  (fracture 
toughness),  which  is  a  material  constant.  The  relationship,  Eq. 

9,  holds  up  to  the  point  A  (see  Fig.  2)  where  R  is  equal  to  the 
ultimate  strength  Rq.  Thus,  the  strength  (residual)  of  the 
critical  component  of  the  structure  follows  the  curve  A-B-C 
as  shown  in  Fig.  2.  As  a  result,  there  is  a  critical  crack  size 
ac  (point  B)  beyond  which  the  strength  Rq  starts  to  decrease 
following  Eq.  9.  This  critical  crack  size  a  is  a  very  important 

C 

parameter  in  selecting  or  comparing  candidate  materials  for  a 

particular  structure  [see  Ref.  32]. 

Let  t  be  the  time  (flight  hours) required  to  reach  a  after 
c  c 

crack  initiation.  Then,  it  follows  from  Eq.  8  that 

*  11  -  W)/oa0°  (10) 

Let  R(t  )  be  the  residual  strength  at  t  flight  hours  after 
m  m 

a,  i.e.,  the  residual  strength  at  t=t  +t  after  crack  initiation. 
<-  cm 

Then,  integrating  Eq.  7  from  a  to  a  (t  )  that  is  the  crack  size 

W  Iu 

associated  with  the  residual  strength  R(t  ),  and  using  Eq.  9,  one 


obtains 


R(tm)  =  R0[l-a.  c  0  tml 1/2  Ul> 

in  which  is  the  ultimate  strength  (see  Fig.  2). 

In  order  to  prevent  the  crack  from  propagating  to  a  catastrophic 
size,  it  has  been  a  design  practice  to  provide  crack-stoppers  in 
the  structure,  which  will  arrest  the  crack.  This  practice  is  called 
fail-safe  design.  If  ag  denotes  the  distance  between  adjacent 
fail-safe  stoppers,  then  it  is  the  maximum  crack  size  allowable  in 
the  structure,  and  the  minimum  residual  strength  at  this  crack 
size  can  be  obtained  from  Eg.  9  (see  Fig.  2) . 

Thus  far,  the  residual  strength  of  a  cracked  structure  is 
obtained  from  the  Griff ith-Irwin  equation  (Eq.  9) .  It  applies  to 
nonredundant  structures  [e.g.,  Ref.  30].  Many  structures,  however, 
are  designed  with  high  redundancy.  Under  this  circumstance, 
the  residual  strength  of  the  cracked  structure  no  longer  follows 
Eq.  9,  but  depends  on  the  particular  design  and  has  to  be  obtained 
by  analysis  and  testing  [e.g.  Refs. ,14,15,33-36] .  As  a  result,  it  is 
not  possible  to  discuss  the  residual  strength  of  a  highly  redundant 
cracked  structure  in  general.  However,  the  general  trend  is  for 
the  residual  strength  to  be  a  raonotonically  decreasing  function 
of  the  flight  hours  or  the  crack  size. 

Let  Rq5  bi  the  residual  strength  at  the  fail-safe  crack  size 
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I 


ac  which  is  determined  from  analysis  and  testing.  In  view  of 
the  form  of  Eqs.  9  and  11  as  well  as  the  test  results  le.g..  Refs. 
14-15,  33-36J ,  a  possible  model  for  the  residual  strength 
R(tn)  at  t  flight  hours  after  crack  initiation  is  suggested  as 
follows; 


where  a(tn)  is  the  crack  size  at  tRand  is  computed  from  Eq.  8. 

3.4  Periodic  Inspection  and  Crack  Detection 

In  the  preceding  section,  the  fatigue  damage  is  expressed 
in  terms  of  the  fatigue  crack  size  a(tn)  (Eq.  8),  which  increases 
monotonically  with  respect  to  flight  hours  tn,  and  hence  the  residual 
strength  R(tR)  (Eq.  12)  decreases.  The  purpose  of  the  periodic 
inspection  is  to  detect  the  fatigue  cracks.  If  a  fatigue  crack 
is  detected,  it  is  repaired  and  the  strength  of  the  component  is 
renewed,  thus  increasing  the  structural  reliability. 

The  probability  of  detecting  a  fatigue  crack  in  the  critical 
component  depends  on  (i)  the  probability  of  inspecting  the  cracked 
detail  (correct  location)  in  the  component  and  (ii)  the  resolution 
capability  of  the  crack  detection  method  used  for  the  inspection/ 
[Refs.  32,36,37].  Let  U-^  be  the  probability  of  inspecting  the 
cracked  detail  and  Uj (a)  be  the  probability  of  detecting  an  ex¬ 
isting  crack  of  length  a  when  the  cracked  detail  is  inspected. 

U-^  depends  on  the  thoroughness  of  inspecting  ell  the  details  and 


U2 (a)  depends  on  the  resolution  capability  of  a  particular 
detection  method  used  for  inspection  as  well  as  the  existing  crack 
size  a.  A  typical  example  for  the  detection  probability  U2(a) 
is  given  by  Fig.  3  where  the  method  of  dye  penetrant  is  employed 
[Ref.  32].  In  general,  U2 (a)  is  a  monotonically  increasing  function 
of  the  crack  size  a.  It  is  reasonable  to  assume  a  minimum  crack 
size  a^  below  which  the  crack  cannot  be  detected  and  a  maximum 
crack  size  a2  beyond  which  it  can  certainly  be  detected.  Hence, 
a  possible  model  for  U2 (a)  is: 

U2  (a)  =0  a  < 

-  [ (a-a1)/(a2-a1 ) ]m  a^  <  a  <  a2  (13) 

=1  a2  <  a 


where  m  is  a  dimensionless  parameter.  It  can  be  observed  from  Fig. 
3  that  m==l,  a^=0.02"  and  a2=0.3"  for  the  dye  penetrant  method. 
Consequently,  when  a  crack  of  length  a  exists  in  the  structure, 
the  probability  of  detecting  it,  denoted  by  F[a],  is  the  product 
of  and  U2 (a) , 


F  [a]  =  U1U2(a) 


(14) 


* 

and  the  probability  of  not  detecting  the  crack  F  [a]  is  equal  to 
1-F [a] . 
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IV 

CONDITIONAL  FAILURE  RATE  (RISK  RJNCTION) 


As  mentioned  previously,  catastrophic  failure  occurs  as 
soon  as  the  ultimate  strength  Rq  (or  the  residual  strength  after 
crack  initiation  R(tn))is  exceeded  by  the  gust  load.  It  can  be 
observed  from  Fig.  1  that  the  problem  is  a  first-passage  problem 
with  cne-sideu  threshold  [Ref.  1,20-23].  The  average  failure 
rate  (or  risk  function)  per  load  cycle  for  the  threshold 
denoted  by  11q(Rq)  ,  is  therefore  [Refs.  1,22], 


VV  “  ',+  (R0)/ttc 


(15) 


where  V  (RQ)  is  the  uperossing  rate  given  by  Eq.  3,  and  H>1  is 
the  average  clumpsize  [Refs.  1,22].  For  most  structures,  particular¬ 
ly  for  aircraft  structures,  the  threshold  RQ  is  very  high  compared 

to  a  _  so  that  the  events  of  excursion  (or  exceedance)  are 
cl 

statistically  independent,  and  hence  Mr  =  1.  We  shall  set  Mc  =  1 
realizing  that  such  an  approximation  is  conservative  [Ref.  1]. 

The  ultimate  strength  Rq  for  most  structures  is  a  random 
variable  [see  Refs.  18-19].  For  aircraft  structures,  data  has  been 
compiled  in  Ref.  18  where  a  Weibull  distribution  with  the  shape 
parameter  equal  to  19  has  been  proposed.  Therefore,  the  failure 
rate  h^  per  flight  hour  follows  from  Eq.  15  as 


h  =  N 
n0  0 


/u+(x)Vx 


)  dx 
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(16) 


4- 

where  f_  (x)  is  the  probability  density  of  RA  and  v  (x)  is  given 
R0  0 
by  Eq.  3. 

Following  Ref.  18,  that  the  statistical  distribution  of  the 
ultimate  strength  is  a  Weibull  distribution  with  the  shape 
parameter  aQ  and  the  scale  parameter  B0,  we  obtain  the  failure 
rate  hQ,  by  substituting  Eq.  3  into  Eq.  16  and  by  making 
appropriate  transformations,  as  follows; 

h°  =  Si  Pi  N°/e"X  ll~eXP  ['  ^dX  (l7) 

in  which 


vci  =  80/oci 

voi  ‘  V'ci 


i=l  ,2 


(18) 


The  failure  rate  hQ  obtained  above  is  the  conditional  failure 
rate,  the  condition  being  that  the  fatigue  crack  has  not  been 
initiated. 

Let  h(tn)be  the  failure  rate  at  tR  flight  hours  after  crack 
initiation;  at  this  time,  the  residual  strength  R(tn)  is  given  by 
Eq.12.  Then,  it  car?  easily  be  shown  that  h(tn)  can  be  computed 
from  Eq.  17  where  appearing  in  Eq.  18  should  be  replaced  by 
B0Yn  <see  E<3*  12)  ' 
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) 


(19) 


rn  =  l  ~  (i  -  U 


.1/2 


a(V  '  ao 

as  "  a0 


When  the  residual  strength  follows  Eq.  11,  it  is  obvious  that 

h(t  )  =  hrt  for  t  <  t  ,  where  t  is  given  by  Eq.  10.  For  t  >  t  , 
n  0  n^  c  c  3  J  3  n  c 

h(tn)  can  also  be  computed  from  Eq.  17,  where  appearing  in 

* 

Eq.  18  should  be  replaced  by  8q  yn  (see  Eq.  11) , 


* 


[1  -  •ecQ<tn-tc)]1/2 


(20) 


If  the  statistical  distribution  of  the  ultimate  strength  Rq 
is  assumed  to  be  normal  with  a  mean  value  and  a  coefficient  of 
variation  (dispersion),  the  failure  rate  h(tn)  can  be  obtained 
in  a  closed  form  as  follows; 


in  which 


'i  =  'Vo^ci1  '  'V'ci1 


i  =  1,2. 


ri  =  voVo/’ci 


(22) 


where  Yn  io  given  by  Eq,  19.  The  failure  rate  h^  before  crack 
initiation  can  be  computed  from  Eq.  21  whete  appearing  in  Eq.  22  is 
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I 


1.0.  For  the  case  where  the  residual  strength  follows  Eq.  11, 

* 

Yn  should  be  replaced  by  rn  (see  Eq.  20) . 
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V 

PROBABILITY  OF  FAILURE  UNDER  PERIODIC  INSPECTION 


Haying  obtained  the  conditional  failure  ratej  h^  and  hft^), 
representing  the  failure  rate  before  crack  initiation  and  the 
failure  rate  at  t  (flight  hours)  after  crack  initiation,  respectively, 
we  are  in  a  position  to  derive  the  probability  of  structural  failure 
under  periodic  inspection.  Since  the  time  to  crack  initiation  is 
a  random  variable,  the  following  formula  for  the  conditional  pro¬ 
bability  will  be  used  frequently , 

00 

P  [A]  =  j P[A|t]  W(t)  dt  (23) 

0- 

Where  P[A]  is  the  probability  of  failure,  W(t)dt  is  the 
probability  of  crack  initiation  in  [t,t+dt]  (flight  hours)  and  W(t) 
is  given  by  Eq.  4.  P  [Aj  t]  is  the  probability  of  failure  under  the 
condition  that  the  crack  is  initiated  at  time  t.  Furthermore,  if  the 
total  failure  rate  within  an  interval  of  time  is  denoted  by  K,  then 
the  probability  of  failure  P^  in  that  time  intervax  is 

-K 

Pf  =  1  -  e  (24) 

Let  P_  be  the  probability  of  failure  within  the  intended  service 

V 

life  T(flight  hours) without  inspection.  Then,  it  follows  from  Eq.  23 
and  24  that 
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a  -th  -  /  h(t)dt) 

po  -  Jh  o  w(t)  dt 


+  l-e 


W(t)  dt 


The  first  term  is  the  probability  of  failure  Tinder  the  condition 
that  the  fatigue  crack  is  initiated  at  time  t  in  [0,T].  The 
second  term  represents  the  probability  of  failure  when  the  fatigue 
crack  is  initiated  after  the  service  life  T,  in  which  case  the 


total  failure  rate  is  ThQ. 

Define  H(t  )  as  the  summation  of  failure  rate  from  the  crack 
n 

initiation  to  t  flight  hours  after  crack  initiation r 


fn 

H(tn)  =  /  h( 


(t)  dt 


Then,  with  the  aid  of  Eq.  4,  PQ  can  be  written  as 


PQ  -.l-e 


-ThQ-(T/p) 


a  -T 


-j W(t) 


-th.-H(T-t) 
e  u  dt 


Suppose  the  structure  undergoes  a  periodic  inspection  at 

At 

each  Tq  flight  hours  [see  Fig.  4].  Let  Pj  be  the  probability  of 
failure  in  j  service  intervals  [0,jTgJ  under  the  condition  that  the 
crack  is  initiated  after  j-lth  inspection.  Then,  it  follows  from 


Eq.  23  that 


I 


in  which  the  first  term  denotes  the  failure  probability  in  [0,jTQ], 
when  the  fatigue  crack  is  initiated  in  the  j  th  service  interval 
[  ( j-l) Tg, jTg] ,and  the  second  term  denotes  the  failure  probability 
when  the  fatigue  crack  is  initiated  after  j  Tg. 


* 

P. 

3 


-I  (j-l)T  /3J“ 

=  e  -  e 


J  W[(j-l)T0+t]  e 


-tjT0/e]“-jT0h0 

[(j-l)Tft+t]-H(Tn-t) 

0  0  dt 


j=l,2 


t  •  •  • 


(28) 


Let  P ( j )  be  the  probability  of  failure  within  j  service  intervals 
[0,jTg]  under  periodic  inspection.  It  is  obvious  that  the  probability 

of  failure  within  the  first  service  interval  P(l)  is  equal  to 

* 

P1  ,  i.e., 


(29) 


and  the  total  failure  rate  in  this  time  interval  denoted  by 
follows  from  Eqs  24  and  29, 
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=-ln  [1~P (1) ] 


(30) 


The  probability  of  failure  in  the  first  two  service  intervals 
[0,2Tq]  can  be  written  as 


P (2)  *  P 


* 

2 


+ 


(t)W(t)dt 


(31) 


* 

where  P2  is  the  contribution  from  the  event  of  crack  initiation  after 
the  1st  inspection  given  by  Eq.  28,  and  the  second  term  on  the 
right-hand  side  is  the  contribution  from  the  event  of  crack 
initiation  in  the  first  service  interval  [0,TQ].  q^2 (t)  is  the 

failure  probability  under  the  condition  that  the  crack  is 
initiated  at  time  t,  which  consists  of  two  parts, 


q12(t)  =  F[a(T0-t)l  (t)  +  F*  [a (TQ-t)  ]V12  (t) 


(32) 


in  which  a(T^-t)  is  the  crack  size  at  the  first  inspection  time 

Tq  [see  Fig.  4].  F [a(Tg-t) ]  is  the  probability  that  this  crack 

* 

is  detected  at  and  F  [a(TQ-t) ]=l-F[a(T0~t) ]  is  the  probability 
of  not  detecting  the  crack  at  Tq.  Both  a(Tg-t)  and  F[a(Tp— t) ] 
are  computed  from  Eqs.  8  and  14,  respectively. 

V12(t)  is  the  failure  probability  in  [0,2Tq]  under  the 
condition  that  the  crack,  initiated  at  time  t,  is  not  detected  at 
the  first  inspection.  Hence, 
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V12(t)  =  1  -  exp  -hQt  -  H(2T0-t) 


(33) 


The  term  C32’  (t)  denotes  the  failure  probability  in  [0,2Tq 
under  the  condition  that  the  crack,  initiated  at  time  t,  is 
detected  at  the  first  inspection. 


.(1) 

'12  (t)  =  1-exp 


:h< 


-  H(TQ-t)-K1 


(34) 


where  hQt  +  H(TQ-t)  is  the  total  failure  rate  in[0,TQ]and 


is  the  (renewal)  total  failure  rate  in  [Tq,2Tq],  which  is  the  same  as 
the  failure  rate  for  F ( l)  (Eq.  30) ,  because  the  crack  is  detected 
and  the  renewal  process  for  the  structure  occurs  after  the  first 
inspection. 

The  probability  of  failure  within  [0,3Tq]  can  be  written  as 


follows; 

P (3)  =  P*  + 


/• 


0 
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q10(t)W(t)dt  + 


T 

/: 


23(t)W(T0+t)dt 


(35) 


in  which  the  second  and  the  third  terms  are  the  failure  probabilities 
contributed  by  the  events  of  crack  initiation  in  the  first  service 
interval  and  in  the  second  service  interval,  respectively. 

The  failure  probability  q13(t),  under  the  condition  that  the 
crack  is  initiated  at  time  t  (in  the  first  service  interval) , 
consists  of  three  parts, 
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q13(t)  =  Fia(T0-t)]C^3)  (t)  +  F*[a(T0-t)]P[a(2T0-t)]C](3)  (t) 

+  F*[a(T0-t)}F*ra(2T0-t)]V13(5:)  (36) 

where  a(2TQ-t)  is  the  crack  size  at  the  second  inspection  time 
2Tq,  when  the  crack  is  initiated  at  time  t.  Eq.  36  is  self- 
explanatory.  The  first  term  is  the  failure  probability  contri¬ 
buted  by  the  event  of  crack  detection  at  the  first  inspection 
time.  The  second  term  is  contributed  by  the  event  that  the  crack 
is  not  detected  by  the  first  inspection  but  by  the  second 
inspection.  The  third  term  is  contributed  by  the  event  that  the 
crack  is  not  detected  by  both  inspections.  Hence. 

V13(t)  »  1  -  exp  £-hQt  -  H(3TQ-t)j 

(t)  =  1  -  exp  £-h0t  -  H(2T()-t)-K1  j  (37) 

C^Nt)  -  1  -  exp  [-hQt  -  H'T0-t)-K2j 

where  K2  is  the  total  renewal  failure  rate  in  [TQ,  3TQ) ,  which 
is  the  same  as  thai  for  P(2), 


K2  =  -In  [  1  -  P (2) ]  (38) 

The  failure  probability  q23(t)  (Eq.  35),  under  the  condition 
that  the  crack  is  initiated  at  time  TQ  +  1,  consists  of  two  parts, 
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q23(t) 


F[a(T0-t)J  c£]  (t) 


+  F  [a(T0-t)JV23(t) 


(39) 


where  the  first  term  denotes  the  failure  probability  when  the  crack  is 
detected,  and  the  second  term  when  the  crack  is  not  detected  at  the 
second  inspection  time, 


V23(t)  =  1  -  exp  [-h0(T0+t)-H(2T0-t)] 
C^}(t)  =  1  -  exp  [~h0  (TQ+t) -H  (TQ-t)  ~K1] 


(40) 


In  a  similar  fashion,  the  general  solution  tor  the  probability 
of  failure  within  j  service  intervals  [0,jTQ]  can  be  obtained 
recursively  as  follows: 

0 

Ii;j(t)W[(i-l)T0+t]dt 

j=2 , 3 , . • • 

1=1 ,2, 


g.^(t)  =  F [a (Tfl“t) lc|j }  (t)  + 


li] 


+<5 


D-i 

n  F*  [a  (kTg-t)  ] 
k=l 


Vij(t) 


(41) 


j-i  k-1  . 

j-i-2  X-  "  P*Ia(;“Vt)J  FIa(kT0'tn  cij  (t) 


k=2  |m=l 
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V±j  (t)  =  1  -  exp  |  -h0|U-l)T0+t]-H[  (j-i+l)T0-t]J 

cJJ1  (t)  =  1  -  exp  j-hQI  (i-l)TQ+tJ  -H(kTQ-t)-K;._i_k+1J 

k=l / 2 , . . , ( j  i ) 

K^.  =-ln  Il-P  (k)  ]  (41-a) 

where  *  1  if  j-i-2»0,  and  S^_i-2-  0  otherwise. 

The  probability  of  failure  derived  in  Eq.  41  holds  for  a  single 
airplane.  For  a  fleet  of  M  airplanes,  the  fleet  reliability  is 
defined  as  the  probability  of  no  failure  at  all  [Refs.  24-25].  Since 
the  material/structural  performance  parameters,  such  as  ultimate 
strength,  fatigue  crack  initiation,  crack  propagation;  residual 
strength,  etc.  are  statistically  independent  for  each  airplane,  and 
since  the  random  loads  experienced  by  each  airplane  are  also  statis¬ 
tically  independent,  the  event  of  failure  of  each  airplane  is  statis¬ 
tically  independent.  Hence,  the  fleet  reliability  in  j  service 
intervals  [0,  jTQ] ,  denoted  by  Rm(j),  is  R^j)  =  [1-P ( j )  ]M  and 
the  probability  of  first  failure  in  a  fleet  of  M  airplane  is 

Pf(j)=  l-R^j)  =  1  -  [1-P  (j)  ]M  (42) 


26 


VI 

NUMERICAL  EXAMPLE  AND  COMPUTATIONAL  PROCEDURE 


A  numerical  example  close  to  the  real  situation  is  given 
herein  to  demonstrate  the  approach  proposed  in  this  study.  The 
parameters  associated  with  the  gust  loading  {Ref.  7]  are  as  follows? 
p^  =  99.5%,  p2  =  0.5%,  ocl  =  0.07g,  ac2  -  0.18g,  where  lg  =  lOksi 
(see  Eq.  3).  This  loading  spectrum  is  plotted  in  Fig.  5.  It  is 
assumed  that  each  flight  is  of  two  hours  duration  and  in  one  flight 
hour  the  structure  is  subjected  to  600  load  cycles,  i.e.  Ng  =  600, 

N  =  1200  (see  Eq.  8) .  The  average  fourth  power  of  the  ground- 

cl 

4  4 

air-ground  cycle  is  Z  =  (1.5g)  ,  and  the  initial  crack  size  at 
crack  initiation  is  ag  -  0.04"  (Eq.  8).  The  shape  parameter  for 
crack  initiation  is  a  =  4  and  the  scale  parameter  &  =  30,000  hours 
(Eq.  4).  The  material  of  the  critical  component  i»  aluminum.  The 
mean  value  of  the  ultimate  strength  Rg  is  pQ  =  5.7g  and  the  dispersion 
is  Vg  =  5.6%  (see  Eq.  21).  The  critical  stress  intensity  factor 
Kc  =  75  ksi-^in.  The  fail-safe  crack  size  at  which  the  crack  is 
arrested  by  the  crack  stoppers  ag  =  7"  and  the  residual  strength  at 

a  is  equal  to  43%  of  the  ultimate  strength,  i.e.,  £  =  0.43  (Eq.  19). 

s 

The  thresholds  for  crack  detection  are  a^^  =  0.02",  a2  =  2"  and  the 
inspection  quality  m  =  0.2  (see  Eq.  13).  Further  assume  that 
every  derail  in  the  critical  component  is  inspected  at  the  inspection 
time,  i.e.,  U-^  =  1.0  (Eq.  14).  The  crack  propagation  factor  under 
Gaussian  random  loading  c  =  0.6x10  'ksi^in  is  taken  from  the  test 
result  of  Refs.  27-28  (see  Eq.  8).  The  design  service  life  for  the 
airplane  is  T  =  15,000  flight  hours.  The  power  spectral  density  of 
the  response  due  to  gust  loads  is  such  that  A=115(Eq.A-2  and  Eq.A-5) . 
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With  all  the  input  parameters  given  above,  the  computational 
procedure  is  summarized  as  follows: 

(i)  Compute  the  crack  size,  a(t),  after  crack  initiation, using 
Eq.  8.  Some  results  are  shown  in  Fig.  6. 

(ii)  Compute  the  residual  strength,  R(t),  after  crack  initiation, 
using  Eq.  11  or  12.  Some  results  using  Eq.  12  are  plotted 
in  Fig.  6. 

(iii)  Compute  the  conditional  failure  rates  h^  and  h(t)  using 
either  Eqs.  17-20  or  Eqs.  21-22.  Some  results  using 
Eqs.  21-22  are  plotted  in  Fig.  6. 

(iv)  Compute  the  cumulative  failure  rate  H(t)  using  Eq.  26. 

(v)  Compete  the  detection  probability  F[a(t)]using  Eqs.  13-14, 

where  a(t)  has  been  evaluated  in  the  procedure (i) . 

* 

(vi)  Compute  Pj  using  Eq.  28  for  j=l,2,...N. 

(vii)  Compute  the  failure  probability  P(j)  in  [0,jTg3  for  j=2, — N 
using  Eqs.  41. 

Results  for  the  first  failure  probability  ( j )  (Eq.  42)  for  a  fleet 

of  50  airplanes  as  a  function  of  service  flight  hours  are  plotted  in 
Fig.  7  for  different  number  of  inspections.  The  entire  computation 
takes  2  minutes  on  a  CDC-6600  computer. 

It  is  very  interesting  to  note  that  the  curve  for  the  failure 
probability  under  no  inspection,  N=0,  consists  of  two  segments  with 
completely  different  characteristics.  The  failure  rate  in  the  first 
segment  from  0  to  5,000  flight  hours  is  essentially  hg.  This  can 
be  visualized  from  the  fact  that  even  though  the  fatigue  crack  is 
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initiated  at  the  initial  service  time  t=0,  it  takes  approximately 


4,700  hours  for  the  crack  to  reacn  the  fail-safe  crack  size  a  as 

s 

clearly  shown  in  Fig.  6.  The  failure  in  this  region  is  essentially 
attributed  to  the  exceedance  of  the  ultimate  strength  Rg.  As  a  result, 
inspection  in  this  time  interval  10  to  5,000  hours] has  little  effect 
in  respect  to  an  improvement  of  the  fleet  reliability.  It  can  be 
observed  from  Fig.  7  that  all  the  curves  coincide  in  this  region. 

The  second  segment  is  in  the  region  from  6,000-15,000  flight 
hours.  In  this  region,  the  crack  initiated  in  the  early  service 
hours  has  reached  its  fail-safe  crack  size  and  hence  failure  is 
essentially  attributed  to  the  exceedance  of  the  residual  strength 
£RQ.  Therefore,  the  failure  rate  is  much  higher  than  hQ  (see  Fig. 

6) .  This  is  a  typical  characteristic  of  the  progressive  fatigue 
damage  effect.  Because  of  the  existence  of  the  fatigue  crack,  the 
inspection  in  this  region  has  a  significant  effect  on  the  fleet 
reliability  as  clearly  shown  in  Fig.  7. 

Consequently,  inspection  at  later  service  times  is  much  more 
efficient  than  at  the  early  service  time.  This,  however,  is  only 
true  if  we  are  confident  of  the  loading,  material/structural  fatige 
performance  and  the  structural  analysis.  Otherwise,  the  early  service 
time  inspection  is  still  desirable,  because  it  will  enable  one  to 
discover  any  deficiencies  in  the  design  of  the  airplane,  and  to 
detect  if  other  uncontrollable  factors,  such  as  manufacturing 
variability , corrosion  etc.,  have  a  significant  effect  on  the  fatigue 
crack  initiation.  It  is  the  current  practice  to  perform  early 
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inspection  so  that  necessary  action,  e.g.,  redesign,  can  be  taken 
if  unexpected  fatigue  cracks  are  detected  in  the  early  service  life. 

As  mentioned  previously,  the  purpose  of  inspection  is  to  detect 
the  cracked  detail  and  repair  it.  ‘Therefore,  the  ultimate  benefit 
one  can  achieve  through  the  inspection  is  to  maintain  the  airplane 
in  a  crack-free  condition.  Under  the  crack-free  condition,  the 
failure  rate  is  hQ.  This  ultimate  improvement  is  shown  in  Fig. 7 
by  the  curve  associated  with  39  inspections.  It  can  be  observed 
that  this  curve  is  practically  the  extension  of  the  first  segment 
of  the  curve  N=0,  i.e.,  failure  results  from  the  exceedance  of  the 
ultimate  strength  Rg.  As  a  result,  the  number  of  inspections  beyond 
this  limit  results  in  no  benefit  at  all.  This  can  be  observed  from 
Fig.  7  where  the  curve  associated  with  49  inspections  practically 
coincides  with  the  curve  associated  with  39  inspections. 

The  probability  of  first  failure  in  the  intended  service 
life  of  15,000  flight  hours  for  a  fleet  of  M  airplanes  is  plotted 
in  Fig.  8  as  a  function  of  the  number  of  inspections  N,  for  different 
fleet  size  M.  It  indicates  clearly  the  effect  of  both  the  inspection 
and  the  fleet  size  on  the  fleet  reliability  or  the  probability  of 
first  failure. 


VII 

OPTIMUM  INSPECTION 


Thus  far,  we  have  observed  that  the  nondestructive  inspection  has 
a  significant  effect  on  the  fleet  reliability.  In  particular,  the  fleet 
reliablility  increases  as  the  inspection  frequency  or  the  inspection 
quality  increases.  However,  the  cost  of  inspection  and  maintenance 
increases  also  as  the  frequency  or  the  quality  of  the  inspection 
increases.  As  a  result,  there  is  a  trade-off  between  the  fleet 
reliability  and  the  cost  of  maintenance.  In  this  connection,  there 
are  a  number  of  variables  which  can  be  adjusted  in  such  a  way  that 
an  objective  function  can  be  optimized.  These  variables  are,  for 
instance,  the  number  of  inspections  N,  the  inspection  quality  (see 
Eq.  13)  of  the  safety  factor  v  .  (see  Eq.  18)  for  the  structural 
design  of  the  component,  etc.  For  the  sake  of  simplicity  in  present¬ 
ing  the  basic  idea,  we  shall  consider  the  trade-off  for  the  number 
of  inspections  only,  realizing  that  the  trade-off  for  other 
variables  can  be  made  in  a  similar  fashion. 

The  objective  function  to  be  minimized  is  the  "expected  cost" 

[Refs. 38, 39]  while,  at  the  same  time,  a  prescribed  level  of  fleet 
reliability  is  maintained.  The  expected  cost  C*  consists  of  the 
expected  cost  of  inspection  and  the  expected  cost  of  failure  of 
airplanes, 

C*  =  NMCj  +  Cf  M  P (N)  (43) 

in  which  N  is  the  total  number  of  inspections;  M  is  the  fleet  size; 
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Cj  is  the  cost  of  one  inspection  and  repair  for  one  airplane,  which 
depends  on  a  particular  inspection  quality  given  by  Eqs.  13.  P(N) 
is  the  probability  of ’failure  of  one  airplane  in  the  design  service 
life  under  N  inspections,  and  MP (N)  is  the  expected  number  of  air¬ 
planes  to  fail  during  the  design  service  life.  is  the  cost 
of  failure  of  one  airplane.  P(N)  is  computed  from  Eq.  41.  The 
first  term  in  Eq.  43  denotes  the  expected  cost  of  inspection  and 
the  second  term  denotes  the  expected  cost  of  failure.  Note  that 
the  first  term  is  zero  if  no  inspection  is  performed  (N=0) .  The 
inspection  cost  increases  as  N  increases  but  the  cost  of  failure 
decreases,  since  P(N)  decreases  (see  Fig.  8). 

Meanwhile  the  probability  of  first  failure  Pf  (see  Eq.  42) 

* 

should  be  lower  than  a  prescribed  level  Pf. 


(44) 


Dividing  Eq.  43  by  MC^,  one  obtains 


Cr  =  yN  +  P  (N)  (45) 

* 

where  C  =  C  /MC-  is  the  relative  cost  to  be  minimized  and, 
r  T. 

Y  =  Cz  /  Cf  (46) 
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is  the  ratio  of  the  cost  of  one  inspection  for  one  airplane  to  the 

cost  of  failing  one  airplane  during  the  service  life.  Hence,  y 

is  the  relative  importance  of  the  inspection  cost  compared  to  the  cost 

of  failure.  It  is  also  an  important  parameter  for  the  determination 

* 

of  the  optimum  inspection  frequency  N  . 

* 

The  optimum  inspection  frequency  N  is  obtained  by  minimizing  the 
relative  cost  Cr  given  by  Eq.  45,  and  meanwhile  Eq.  44  is  satisfied. 
The  techniques  for  obtaining  the  optimum  solution  with  the  constraint 
given  by  Eq.  44  are  available  in  the  literature  and  will  not  be 
discussed  herein.  In  Fig.  9,  the  cost  Cr  is  plotted  against  N 
for  various  values  of  y.  The  dashed  curve,  connecting  all  the 

minima,  represents  the  possible  optimum  solutions  for  the  inspection 

* 

frequency.  For  instance,  if  the  fleet  size  is  M  =  1  and  Pf  =  0.01 
(see  Fig.  8) ,  the  dashed  curve  in  Fig.  9  represents  the  optimum 
solution  for  the  inspection  frequency.  It  car.  be  observed  that 
the  smaller  the  value  of  y  is,  the  higuer  will  be  the  optimum  number 
of  inspections. 

In  the  optimization  process,  it  is  not  necessary  to  estimate 
the  absolute  values  of  both  the  cost  of  inspection  Cj  and  the  cost 
of  failure  Cf.  All  one  has  to  estimate  is  y  which  is  the  relative 
importance  of  Cj  to  Cf.  For  instance,  if  the  system  is  very  ex¬ 
pensive,  such  as  the  space-shuttle,  or  if  its  failure  has  a  serious 
consequence  such  as  loss  of  the  system  and/or  loss  of  property 
and  lives,  y  will  be  very  small  and  hence  the  optimum  frequency 

•k 

N  is  higher. 


VIII 

DISCUSSION  AND  CONCLUSIONS 


A  reliability  analysis  for  fatigue- sensitive  aircraft  structures 
based  on  the  theory  of  random  vibration  has  been  presented.  Flight 
loadings  encountered  by  lircraft  are  random  processes.  The  ultimate 
strength  and  the  time  to  fatigue  crack  initiation  are  random  variables. 
After  a  fatigue  crack  is  initiated,  fracture  mechanics  is  applied  for 
predicting  the  crack  propagation  under  random  loading,  and 
the  residual  strength,  a  random  variable,  decreases  as  the  fatigue 
crack  propagates  thus  increasing  the  failure  rate  in  time.  The 
aircraft  is  also  subjected  to  periodic  inspections,  wherein 
the  detection  of  a  fatigue  crack  is  also  a  random  variable  that 
depends  on  the  thoroughness  of  the  inspection  as  well  as  the 
resolution  capability  of  a  particular  technique  used  for  inspection. 
When  a  fatigue  crack  is  detected  during  the  inspection,  the 
cracked  component  is  either  repaired  or  replaced  so  that  both 
the  fatigue  strength  and  the  residual  strength  are  renewed.  Taking 
into  account  the  renewal  process,  random  loadings,  and  various  random 
variables,  the  solution  for  uhe  first  failure  of  a  fleet  of  airplanes 
is  derived.  The  importance  of  inspection  for  improving  the  air¬ 
craft  reliability  and  the  influence  of  the  inspection  frequency 
and  fleet  size  on  the  fleet  reliability  have  been  demonstrated  in 
detail  by  a  numerical  example. 

An  optimization  scheme  for  the  inspection  frequency  has  been 
formulated  on  the  basis  of  the  expected-cost-of -failure  concept. 

The  optimum  inspection  frequency  is  determined  by  minimizing  the 
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expected  cost  while  the  constraint  on  the  structural  reliability 
is  satisfied.  It  has  been  shown  that  the  optimum  inspection 
frequency  increases  as  the  relative  importance  of  the  cost  of 
inspection  compared  to  the  cost  of  failure  becomes  smaller ,  and 
vice  versa. 

In  the  development  of  this  report,  various  assumptions  ar.d 
restrictions  have  been  made  which  can  be  relaxed  in  a  more  extensive 
subsequent  study.  Nevertheless,  it  is  believed  that  the  results 
presented  herein  are  representative,  and  would  not  undergo 
major  qualitative  changes  if  these  assumptions  were  relaxed,  although 
quaintitative  changes  would  be  expected.  The  assumptions,  restrictions 
and  their  implications  are  discussed  below. 

The  first  restriction  is  that  the  flight-by-flight  random 
loading  considered  is  valid  only  for  the  design  of  transport-type 
aircraft,  (e.g.  bombers,  tankers,  high  altitude  logistic  aircraft, 
etc.).  For  fighter  aircraft,  maneuver  leading,  in  addition  to  gust 
loading,  is*  the  major  cause  of  fatigue  damage.  The  occurrence  of 
the  maneuver  load  is  a  random  event  and  the  resulting  loading  history 
is  a  random  process.  To  date,  the  maneuver  loading  has  not  be 
characterized  as  a  stochastic  process  as  it  should  be  [see  Ref.  43]. 
Data,  such  as  the  exceedance  curves  or  peak  counts,  for  fighter  air-r 
craft  has  been  available,  and  it  exhibits  asymmetric  characteristics, 
rather  than  the  symmetric  characteristics  of  gust  loading  given 
by  Eq.  3,  where  the  uperossing  rate  is  the  same  as  the  downcrossing 
rate.  This  is  a  clear  indication  that  the  maneuver  load  is  non- 
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Gaussian  in  nature  and  warrants  a  further  study  for  the  statistical 
characterization  of  such  a  random  process.  The  stuc_,  will  also 
lead  to  a  realistic  and  reasonable  simulation  technique  to  generate 
random  sample  functions  (load  histories)  for  fatigue  tests.  Gust 
loading,  modeled  as  a  composite  Gaussian  random  process  S(t), 
is  employed  for  expendiency  in  this  study.  Although  the  assumption 
is  believed  to  be  reasonable,  there  are  some  indications  that  the  gust 
loading  may  not  be  Gaussian  in  nature.  As  mentioned  before, 
further  studg  is  needed,  e.g.,  Refs.  2-3. 

The  number  of  load  cycles  Ng  per  flight  hour  and  the  number  of 
flight  hours  per  flight,  or  N  ,  are  considered  as  deterministic 
parameters.  These, in  principle,  should  be  treated  as  random 
variables.  Since,  however,  the  averetge  number  of  load  cycles 
per  flight  hour  is  large,  the  effect  of  their  randomness  on  the  final 
reliability  estimate  is  believed  not  to  be  significant.  The  ground 
load  S  (t)  has  been  excluded  from  the  crack  propagation  prediction  in 
Eq.  8,  on  the  rationale  that  it  produces  compressive  stresses  and 
that  its  influence  is  to  eliminate  the  beneficial  effect 
resulting  from  the  occasional  high  gust  loads.  If  there  is  any 
evidence  or  belief  that  it  should  be  taken  into  account  in  the 
crack  propagation  equation,  then  it  is  a  simple  matter  to  include 
an  extra  term  N  S  4  /  N  in  Eq.  8,  where  N  is  the  number  of  ground 
load  cycles  per  flight,  and  Sg4  is  the  average  of  the  fourth 
power  of  the  rise  and  fall  of  the  random  ground  load  Sg(t). 
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In  predicting  the  crack  propagation  under  Gaussian  random 

loading,  see  Eq.  5,  the  crack  propagation  factor  c  has  been 

considered  as  a  deterministic  parameter,  because  it  is  believed 

that  its  statistical  dispersion  can  be  neglected,  as  is  indicated 

by  limited  experimental  data  [Refs,  27-28] .  In  fact,  the 

variability  of  c  reflects  the  statistical  variability  of  fatigue 

behavior  of  materials  in  response  to  the  random  loading.  This  is 

—4 

because  the  statistics  of  the  random  loading,  i.e. ,  S  ,  has  been 
taken  into  account.  It  has  been  observed  from  an  extensive  data  base 
that  the  statistical  dispersion  of  fatigue  life  under  spectrum 
loading  is  much  smaller  than  that  under  constant  amplitude  loading. 
The  dispersion  under  random  loading  is  even  less  than  that 
under  spectrum  loading.  Although  it  may  be  justified  to  neglect 
the  statistical  dispersion  of  c  [see  Refs.  27-28],  extensive  data 
is  needed  for  further  verification. 

When  c  is  considered  a  random  variable,  the  situation  can  be 
handled  as  follows:  The  crack  length  a(tn)  at  tR  flight  hours 
after  crack  initiation  becomes  a  random  variaolfi  and  a(tn>  appearing 
in  the  formulas  for  detection  probability,  Eq.  13-14, can  be 
approximated  by  the  average  value  of  a  (t^) ,  which  is  computed  from 
Eq.  8  with  c  replaced  by  its  mean  value.  The  statistical  distribution 
for  the  residual  strength  R(tn),  given  by  Eq.  11  or  12  will  no 
longer  be  the  same  as  that  of  the  ultimate  strength  Rg.  However, 
the  distribution  of  R(tn)  can  be  obtained  from  the  distribution  of 
Rg  and  c  at  least  numerically  although  the  numerical  computation  for 


the  failure  rate  h(t  )  will  be  very  involved. 

n 

Both  the  ultimate  strength  Rq  and  the  residual  strength  R(tn) 

after  crack  initiation  have  been  treated  as  random  variables  as 

t.hey  should  be  [see  Ref.  18].  This  fact  is  important  and  should 

be  emphasized ,  since  their  statistical  variability  is  disregarded 

by  many.  Our  computational  experience  indicates  that  there  is 

a  significant  difference  in  failure  rates,  hQ  and  h(tn),  and  hence 

in  the  failure  probability,  when  they  are  treated  as  deterministic 

quantities.  The  difference  in  the  failure  rates,  hQ  and  h(tn), 

ranges  from  one  to  two  orders  of  magnitude  higher  for  the  case 

where-  Rn  and  R(t  ) ,  are  considered  as  random  variables.  As  a 
u  n 

result,  failure  rates  are  very  unconservative  without  treating 

R0  and  R(t  )  as  random  variables, 
o  n 

For  the  sake  of  simplicity  of  the  presentation,  only  the 
failure  probability  under  periodic  inspection  is  derived.  The 
inspection  may  not  be  periodic.  The  solution  for  failure  probability 
under  nonperiodic  inspections  can  be  derived  easily  in  a  similar 
fashion  as  discussed,  except  that  the  total  renewal  failure  rates 
Kj,  j  =  1,2...  (see  Eq.  41-a)  have  to  be  evaluated  separately; 
since  Eq.  41-a  no  longer  holds.  The  evaluation  of  Kj  involves 
no  analytical  difficulty. 

Only  a  concept  of  optimization  for  inspection  frequency,  based 
on  the  cost  of  failure  is  formulated  in  this  study.  There  are,  in 
fact,  a  variety  of  problems  associated  with  the(  inspection 
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optimization  for  aircraft  structures,  which  have  not  been  touched  here 
in  and  will  be  reported  later.  For  some  types  of  military  aircraft 
where  the  critical  component  is  integrated  into  the  entire  structure, 
its  replacement  means  the  replacement  of  the  entire  wing.  Therefore, 
the  cost  of  replacement  is  significantly  higher  than  the  cost  of 
inspection  and  both  costs  should  be  considered  as  different  variables. 
It  has  been  indicated  in  the  numerical  example  that  the  inspection 
at  the  later  time  of  the  service  life  is  much  more  efficient. 
Consequently,  it  is  possible  to  adjust  or  vary  the  lengths  of 
the  inspection  intervals,  e.g.,  longer  inspection  internals  in  the 
early  life  time  and  shorter  inspection  intervals  at  the  later  service 
life,  so  that  the  maximum  benefit  can  be  achieved.  The  possibility 
of  using  or  combining  various  inspection  qualities  or  techniques 
to  achieve  either  a  maximum  utility  or  a  maximum  improvement  of 
fleet  reliability  deserves  further  study.  In  all,  the  trade-off 
between  replacement,  repair,  inspection  quality,  inspection  interval, 
inspection  frequency,  retirement  of  aircraft,  intended  service  life, 
etc.  presents  a  broad  spectrum  of  very  interesting  problems  for 
further  study. 

Finally  several  statistical  variables  have  not  been  accounted 
for  in  the  present  study,  because  of-  the  lack  of  statistical  infor¬ 
mation.  Typical  examples  are  (i)  the  statistical  variability  in  air<- 
craft  performance  resulting  from  the  statistical  variability  of 
manufacturing,  (ii)  the  statistical  variability  of  environmental 
effects  such  as  stress-corrosion,  corrosion  fatigue,  buffeting 
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effects  etc./  and  (iii)  the  probability  of  making  errors  in  the 
structural  analysis  and  in  loading  prediction,  resulting  from  a 
lack  of  sufficient  information.  These  random  variables  should 
be  taken  into  consideration  in  the  reliability  analysis  of  air¬ 
craft  structures,  when  their  statistical  background  information 
becomes  available.  This  has  also  been  pointed  out  by  Crichlow 
[Ref.  42]. 


APPENDIX 

STATISTICS  OF  RISE  AND  FALL  OF  RANDOM  PROCESSES 


The  technique  proposed  in  Refs.  26-27  for  evaluating  the 
statistics  of  rise  and  fall  of  a  stationary  Gaussian  random 
process  S(t,o^)  is  rather  cumbersome.  However,  a  simpler 
approximation  has  been  suggested  in  Ref.  29  as  follows: 

S4  (oi)  =  A  o4  (A-l) 

A  =  16  +  12tt  2F1(-J'~f;  !'*ko> 

+24  2F1(-l,-l;l;kQ)  (A-2) 

where  S4^)  is  the  average  of  the  fourth  power  of  rise  and  fall  of 
the  Gaussian  process  S(t,a^)  and  2F^(.)  *s  t^e  bypergeometric 
function , 


=  P2(t)  +  A 2  (t  ) 
('o)cos  tor  du 


(«j)  sin  <u  t  da) 


(A- 3) 


(A- 4) 


in  which  uQ  is  the  representative  frequency  of  S(t),  and  G*  !u) 
is  the  normalized  one-sided  power  spectral  density  of  S(t,a^), 
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which  is  identical  for  all  i  =  1,2,...  as  described  in  the  text. 

"T 

Therefore  S  for  the  composite  Gaussian  process  S(t)  can  be 

obtained  from  Eq.  A-l  and  Eq.  2  as  follows; 

00 

S4  ■/?«  fo(x)  dx  =  3A  (Px  a4x  +  P2  a40)  (A-5) 

where  A  is  given  by  Eq.  A-2. 
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TIME  TO  CRACK  INITIATION 
IS  A  RANDOM  VARIABLE 


Fig.  1  -  Profile  of  Flight-by-Flight  Load  Spectrum,  Ultimate  Strength  and  Residual  Strength 


CRACK  LENGTH  a 


Fig.  2  -  Relationship  Between  Residual  Strength  R 
and  Crack  Size  a 


Fig.  3  -  Demonstration  of  Crack  Detection  Capability 


PROBABILITY  OF  EXCEEDANC 


CRACK  SIZE  »W 


FAILURE  RATE 
I  h(t) 


[residual  strength  R(t)  IH  R0 


1.0+0. 9 


O.l+o. 5 


R(t) 


h(t) 


0.01 


FUGHT  HOUR  t  AETER  CRACK  INITIATION  '»*) 

l(t),  Residual  SttaaRtL  ««  -  “  ““ 

««•  6  '  Ster  Sack  Initiation 


i 


FLIGHT  HOURS  t(103)  IN  SERVICE 


Probability  of  First  Failure  in  a  Fleet  of  50  Airplanes  vs.  Service 
Time  and  Number  of  Inspections 
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Fig.  9  -  Relative  Cost  Cr  vs.  Humber  of  inspections,  and  Optimum 
Inspection  Frequency 
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